Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a3a2f33332d3333203d3e20323633313434.roa
File:                     323830343a313736383a3a2f33332d3333203d3e20323633313434.roa (raw, json)
Hash identifier:          zSkisTGNz7LlMsZGH/L+xCKwmgpoiRIN9pVAMEVK4iI=
Subject key identifier:   F8:FE:55:5F:A1:B0:A2:68:87:8C:E2:C7:EA:C3:10:1C:D2:D3:1D:03
Certificate issuer:       /CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
Certificate serial:       430865B2586428C3A801F43C1512082FD23FEA39
Authority key identifier: 41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a3a2f33332d3333203d3e20323633313434.roa
Signing time:             Thu 04 Apr 2024 00:02:58 +0000
ROA not before:           Wed 03 Apr 2024 23:57:58 +0000
ROA not after:            Thu 03 Apr 2025 00:02:58 +0000
asID:                     263144
IP address blocks:        2804:1768::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:08:65:b2:58:64:28:c3:a8:01:f4:3c:15:12:08:2f:d2:3f:ea:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
        Validity
            Not Before: Apr  3 23:57:58 2024 GMT
            Not After : Apr  3 00:02:58 2025 GMT
        Subject: CN=F8FE555FA1B0A268878CE2C7EAC3101CD2D31D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:6d:b5:f2:f5:69:9e:46:1a:78:0b:2b:82:
                    e3:e0:4b:c8:3e:63:04:30:50:89:79:39:a6:03:ca:
                    36:01:f4:03:a2:83:3d:af:bd:e0:2a:2e:93:cb:0f:
                    6f:d7:5d:43:3c:14:de:90:7b:a1:d5:3b:d0:1d:5b:
                    0a:6b:90:c4:e5:80:1e:a2:ca:02:60:5b:f1:c9:2d:
                    17:59:38:dd:d5:5b:02:43:db:6c:7b:5c:9c:59:f6:
                    bd:c3:bb:09:91:28:26:0b:73:73:af:b4:45:99:0d:
                    b4:66:f1:d8:5a:90:54:e1:49:ad:aa:f7:59:58:0d:
                    c6:30:8e:07:7a:df:c5:34:d2:fc:f4:55:7a:4e:92:
                    d8:8f:02:6c:97:ed:a9:10:2a:5d:b9:20:f4:b1:c6:
                    07:21:39:b8:55:d2:87:1a:a4:10:8e:2b:33:c3:39:
                    54:09:89:3e:cd:97:30:e5:2f:22:74:af:8a:c2:cc:
                    ec:f4:00:b8:86:33:4f:37:df:0c:fd:ed:d5:25:47:
                    0d:3c:a1:93:4e:b5:e3:da:ac:09:1f:52:66:76:82:
                    43:99:3f:e6:29:04:a0:be:c0:c9:0b:00:f3:8b:58:
                    77:15:05:19:b1:10:08:8b:dd:3b:de:cf:9e:30:7a:
                    15:99:c3:bf:e9:14:d0:95:9e:d5:48:e2:d8:6e:8c:
                    4d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FE:55:5F:A1:B0:A2:68:87:8C:E2:C7:EA:C3:10:1C:D2:D3:1D:03
            X509v3 Authority Key Identifier:
                keyid:41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a3a2f33332d3333203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768::/33

    Signature Algorithm: sha256WithRSAEncryption
         81:f8:40:ac:c6:f6:06:00:5a:69:f4:7b:85:4d:28:ce:f7:91:
         0f:71:68:43:72:bb:6b:f2:38:c7:46:42:64:9a:bf:31:dd:e1:
         0f:bf:d5:c8:63:18:3e:a9:e8:eb:fc:89:45:7a:1e:7f:d1:44:
         2f:6f:8b:50:fc:8e:cc:14:6e:18:a8:7a:69:68:2a:11:48:12:
         de:1e:e1:6a:15:89:8f:5d:d7:35:84:97:d1:68:ec:09:30:ae:
         0d:f5:b0:29:0b:b6:54:dc:8c:59:87:82:5c:a8:08:24:b3:f9:
         e3:cd:49:62:95:c2:3a:a6:1b:e8:fa:10:ca:55:48:62:d3:12:
         9c:04:f8:9d:43:64:fd:b6:9e:19:1a:b1:04:a1:db:93:38:ab:
         30:62:ac:5f:b4:e5:d7:9b:2a:d1:d4:0a:0e:5f:cf:2a:7b:80:
         8a:34:a4:ac:aa:57:b4:40:67:a5:f9:1e:28:02:74:7e:f4:7f:
         56:14:3d:04:ab:23:97:51:1b:1b:24:03:6d:5c:ff:73:b7:08:
         89:1f:20:2a:b5:71:69:c9:8a:26:65:e6:73:f0:fa:f7:2b:34:
         4d:a7:1b:a8:7a:e0:3d:b0:e8:33:9c:fe:24:8c:f0:a2:8e:77:
         9f:65:0a:06:ba:b0:c6:77:99:0a:09:c0:27:d9:5c:e9:e8:6f:
         16:1e:6f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----